$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa File: caefe159-b60c-4d72-9342-6b935e1ff106.roa (raw, json) Hash identifier: 0R+0LmyuOt9kC8kGmFaqVUvLuOBahRWD5yzYg0pjqLc= Subject key identifier: 93:1F:8C:C2:D6:6D:AD:F3:B3:58:42:62:1E:B2:A4:AA:F3:A5:E6:EB Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 7F98FF37E377EA092F56A420576CB633329C7EA0 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa Signing time: Tue 22 Apr 2025 16:52:15 +0000 ROA not before: Tue 22 Apr 2025 16:52:15 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2605:9cc0:f03f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:98:ff:37:e3:77:ea:09:2f:56:a4:20:57:6c:b6:33:32:9c:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 22 16:52:15 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=d8f46fcf32c23bb756a92fa3a3741971e5c3c5a0db4d243c987c8de17946e579, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4c:c6:d7:34:f5:b7:91:25:25:17:5f:33:44: 2b:c9:25:5c:00:ca:c5:9d:17:22:32:9e:a5:ae:71: fb:1e:a4:92:df:2b:e1:d6:4c:2c:f8:21:88:a7:53: 6d:f0:8c:d6:bd:64:63:02:9e:d3:75:7c:ec:bb:83: 39:c2:d9:95:ca:66:ca:36:0e:8b:c4:72:8a:ec:44: 9d:33:9c:45:06:d0:3a:4e:42:0b:69:fb:5d:f0:14: 95:57:01:ee:6a:c3:1d:04:e1:40:3c:40:cf:96:07: e1:c0:45:63:b2:2a:e5:e2:a3:ad:9e:b7:9a:95:3f: 13:54:d0:12:f2:e9:4b:a2:a2:7f:8d:c9:d2:06:57: 97:0b:ab:75:5b:ad:b6:0f:aa:bb:e5:8e:18:9e:f8: b7:39:b8:63:e9:05:14:47:aa:a4:d0:f6:d9:50:15: 36:00:e4:46:25:ab:fc:a5:8a:01:ac:43:81:cd:77: 2f:bf:31:3d:85:e4:6b:46:ac:0d:5a:55:0e:66:b9: 1f:22:17:1f:9a:fb:cf:ee:d8:c1:ea:11:91:6e:f2: 41:1b:4d:fe:b9:79:ed:ac:79:88:e1:67:f0:55:d8: 7b:ee:4b:8a:86:4d:13:5b:8a:52:94:9b:61:a8:16: 56:96:1b:8b:db:35:00:8b:af:4b:2c:39:0d:29:9b: e8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1F:8C:C2:D6:6D:AD:F3:B3:58:42:62:1E:B2:A4:AA:F3:A5:E6:EB X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/caefe159-b60c-4d72-9342-6b935e1ff106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:f03f::/48 Signature Algorithm: sha256WithRSAEncryption 9b:2a:95:1a:1b:95:23:df:24:e7:48:08:03:09:41:4b:8c:c8: 1a:34:b8:4c:06:9a:44:12:2c:c7:27:ae:e1:4a:06:89:c9:5d: f7:f4:23:dd:08:0a:87:d3:0d:72:07:3a:86:0f:b0:b7:09:0e: 43:55:3a:5a:ee:e8:92:69:0d:f2:f7:e1:17:a9:b7:ba:69:12: e5:9c:97:6b:89:4c:3d:e0:fc:67:bd:ea:01:fa:6c:b3:cf:a9: 66:fe:88:c7:a4:09:5c:28:96:4f:d8:4b:9b:0a:ff:ea:eb:1c: 3d:66:99:53:6d:7a:a0:93:b3:c1:c4:c6:6f:08:5c:df:66:82: f1:4f:a3:b7:d1:d2:0d:e6:8b:50:46:de:3b:63:16:43:96:3a: 86:be:a2:49:68:d6:0c:6f:67:d4:f5:eb:61:16:04:32:cf:85: a5:7c:ed:d2:32:6e:ef:aa:4c:74:78:61:da:c4:e9:c7:6c:c9: eb:da:10:64:3b:6d:a1:b5:85:f8:60:cf:5b:41:32:db:57:0f: db:91:d6:ef:8f:07:88:d4:64:20:ef:02:46:36:24:21:f7:a9: fa:e3:7c:ba:d0:80:9f:b8:76:3f:3c:cc:f5:95:87:87:16:64: af:2a:ad:fc:bb:e0:c0:27:50:5d:a0:d5:46:9c:9a:f6:89:c2: 61:31:d9:b2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUf5j/N+N36gkvVqQgV2y2MzKcfqAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDIyMTY1MjE1WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGY0NmZjZjMyYzIzYmI3NTZhOTJmYTNhMzc0MTk3MWU1 YzNjNWEwZGI0ZDI0M2M5ODdjOGRlMTc5NDZlNTc5MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvTMbXNPW3kSUlF18zRCvJJVwAysWdFyIynqWucfsepJLf K+HWTCz4IYinU23wjNa9ZGMCntN1fOy7gznC2ZXKZso2DovEcorsRJ0znEUG0DpO Qgtp+13wFJVXAe5qwx0E4UA8QM+WB+HARWOyKuXio62et5qVPxNU0BLy6Uuion+N ydIGV5cLq3VbrbYPqrvljhie+Lc5uGPpBRRHqqTQ9tlQFTYA5EYlq/yligGsQ4HN dy+/MT2F5GtGrA1aVQ5muR8iFx+a+8/u2MHqEZFu8kEbTf65ee2seYjhZ/BV2Hvu S4qGTRNbilKUm2GoFlaWG4vbNQCLr0ssOQ0pm+jNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUkx+MwtZtrfOzWEJiHrKkqvOl5uswHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2NhZWZlMTU5LWI2MGMtNGQ3Mi05MzQyLTZiOTM1ZTFmZjEwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzA8D8wDQYJKoZIhvcNAQELBQADggEBAJsqlRoblSPfJOdICAMJQUuM yBo0uEwGmkQSLMcnruFKBonJXff0I90ICofTDXIHOoYPsLcJDkNVOlru6JJpDfL3 4Rept7ppEuWcl2uJTD3g/Ge96gH6bLPPqWb+iMekCVwolk/YS5sK/+rrHD1mmVNt eqCTs8HExm8IXN9mgvFPo7fR0g3mi1BG3jtjFkOWOoa+oklo1gxvZ9T162EWBDLP haV87dIybu+qTHR4YdrE6cdsyevaEGQ7baG1hfhgz1tBMttXD9uR1u+PB4jUZCDv AkY2JCH3qfrjfLrQgJ+4dj88zPWVh4cWZK8qrfy74MAnUF2g1UacmvaJwmEx2bI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:27 2025 by rpki-client